@absolutejs/auth 0.55.0 → 0.55.2

package/README.md

@@ -1,5 +1,12 @@
 # Absolute Auth
 
+Server applications should import the primary authentication contract from
+`@absolutejs/auth/server`. This declaration-stable entry point exposes `auth`,
+session types, route protection, provider configuration, and the other core
+server utilities without loading declarations for every optional Auth feature.
+The root entry point remains available for applications that need the complete
+feature export surface.
+
 ## Overview
 
 Absolute Auth is a TypeScript-based authentication system that provides a comprehensive solution for handling user authentication in web applications. It supports multiple authentication providers and offers features such as authorization, callback handling, token refresh, token revocation, and session management.

package/dist/agents/context.d.ts

@@ -0,0 +1,46 @@
+import { Elysia } from 'elysia';
+import { type AgentAuthConfig } from './config';
+import type { AgentPrincipal } from './types';
+type AgentAuthFailure = {
+    code: 'Forbidden' | 'Unauthorized';
+    message: 'Agent is not authenticated' | 'Insufficient agent scopes';
+};
+export declare const agentAuthChallenge: ({ config, error, requiredScopes }: {
+    config: AgentAuthConfig;
+    error?: "invalid_token" | "insufficient_scope";
+    requiredScopes?: string[];
+}) => string;
+export declare const agentResourceMetadataUrl: (config: AgentAuthConfig) => string;
+export declare const agentAuthContextPlugin: (config?: AgentAuthConfig) => Elysia<"", {
+    decorator: {};
+    store: {};
+    derive: {};
+    resolve: {};
+}, {
+    typebox: {};
+    error: {};
+}, {
+    schema: {};
+    standaloneSchema: {};
+    macro: {};
+    macroFn: {};
+    parser: {};
+    response: {};
+}, {}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}, {
+    derive: {
+        readonly protectAgent: <AuthReturn, AuthFailReturn>(requiredScopes: string[], handleAuth: (principal: AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: AgentAuthFailure) => AuthFailReturn | Promise<AuthFailReturn>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn>>>;
+    };
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: import("elysia").ExtractErrorFromHandle<{
+        readonly protectAgent: <AuthReturn, AuthFailReturn>(requiredScopes: string[], handleAuth: (principal: AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: AgentAuthFailure) => AuthFailReturn | Promise<AuthFailReturn>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn>>>;
+    }>;
+}>;
+export {};

package/dist/agents/index.d.ts

@@ -6,6 +6,7 @@ export * from './idJag';
 export * from '../oidc/clientIdMetadata';
 export { createOidcAgentCredentialVerifier } from './oidcAdapter';
 export { agentHasScopes, resolveAgentPrincipal } from './principal';
-export { agentAuthChallenge, agentAuthPlugin } from './routes';
+export { agentAuthChallenge, agentAuthContextPlugin } from './context';
+export { agentAuthPlugin } from './routes';
 export { createInMemoryAgentDelegationStore, createInMemoryAgentIdentityRegistrationStore, createInMemoryAgentRegistrationStore } from './inMemoryStores';
 export { agentDelegationsTable, agentIdentityRegistrationsTable, agentRegistrationsTable, createNeonAgentDelegationStore, createNeonAgentIdentityRegistrationStore, createNeonAgentRegistrationStore, createPostgresAgentDelegationStore, createPostgresAgentIdentityRegistrationStore, createPostgresAgentRegistrationStore } from './postgresStores';

package/dist/agents/index.js

@@ -1423,12 +1423,16 @@ var resolveAgentPrincipal = async (request, config) => {
     userId: delegation.userId
   };
 };
-// src/agents/routes.ts
+// src/agents/context.ts
 import { Elysia } from "elysia";
+var DELETE_CODE_POINT = 127;
+var HTTP_FORBIDDEN = 403;
+var HTTP_UNAUTHORIZED = 401;
+var MINIMUM_PRINTABLE_CODE_POINT = 32;
 var quoteHeaderValue = (value) => {
   const printable = [...value].filter((character) => {
     const codePoint = character.codePointAt(0) ?? 0;
-    return codePoint >= 32 && codePoint !== 127;
+    return codePoint >= MINIMUM_PRINTABLE_CODE_POINT && codePoint !== DELETE_CODE_POINT;
   }).join("");
   return `"${printable.replace(/[\\"]/g, "\\$&")}"`;
 };
@@ -1461,9 +1465,40 @@ var failureResponse = (config, failure, requiredScopes) => new Response(JSON.str
       requiredScopes
     })
   },
-  status: failure.code === "Forbidden" ? 403 : 401
+  status: failure.code === "Forbidden" ? HTTP_FORBIDDEN : HTTP_UNAUTHORIZED
 });
-var json = (value, status = 200) => new Response(JSON.stringify(value), {
+var agentAuthContextPlugin = (config) => new Elysia().derive(({ request }) => ({
+  protectAgent: async (requiredScopes, handleAuth, handleAuthFail) => {
+    if (config === undefined) {
+      const failure = {
+        code: "Unauthorized",
+        message: "Agent is not authenticated"
+      };
+      return await handleAuthFail?.(failure) ?? new Response(failure.message, { status: HTTP_UNAUTHORIZED });
+    }
+    const principal = await resolveAgentPrincipal(request, config);
+    if (principal === undefined) {
+      const failure = {
+        code: "Unauthorized",
+        message: "Agent is not authenticated"
+      };
+      return await handleAuthFail?.(failure) ?? failureResponse(config, failure, requiredScopes);
+    }
+    if (!agentHasScopes(principal, requiredScopes)) {
+      const failure = {
+        code: "Forbidden",
+        message: "Insufficient agent scopes"
+      };
+      return await handleAuthFail?.(failure) ?? failureResponse(config, failure, requiredScopes);
+    }
+    return handleAuth(principal);
+  }
+}));
+// src/agents/routes.ts
+var HTTP_BAD_REQUEST = 400;
+var HTTP_OK = 200;
+var HTTP_UNAUTHORIZED2 = 401;
+var json = (value, status = HTTP_OK) => new Response(JSON.stringify(value), {
   headers: {
     "cache-control": "no-store",
     "content-type": "application/json"
@@ -1497,7 +1532,7 @@ var registrationResponse = (result) => {
       ...body,
       error: "interaction_required",
       error_description: "Authenticate at the service and confirm the account link."
-    }, 401);
+    }, HTTP_UNAUTHORIZED2);
   }
   return json(body);
 };
@@ -1525,33 +1560,7 @@ var parseRegistrationInput = (value) => {
 };
 var escapeHtml = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 var agentAuthPlugin = (config) => {
-  const plugin = new Elysia().derive(({ request }) => ({
-    protectAgent: async (requiredScopes, handleAuth, handleAuthFail) => {
-      if (config === undefined) {
-        const failure = {
-          code: "Unauthorized",
-          message: "Agent is not authenticated"
-        };
-        return await handleAuthFail?.(failure) ?? new Response(failure.message, { status: 401 });
-      }
-      const principal = await resolveAgentPrincipal(request, config);
-      if (principal === undefined) {
-        const failure = {
-          code: "Unauthorized",
-          message: "Agent is not authenticated"
-        };
-        return await handleAuthFail?.(failure) ?? failureResponse(config, failure, requiredScopes);
-      }
-      if (!agentHasScopes(principal, requiredScopes)) {
-        const failure = {
-          code: "Forbidden",
-          message: "Insufficient agent scopes"
-        };
-        return await handleAuthFail?.(failure) ?? failureResponse(config, failure, requiredScopes);
-      }
-      return handleAuth(principal);
-    }
-  }));
+  const plugin = agentAuthContextPlugin(config);
   if (config === undefined)
     return plugin.as("global");
   if (config.agentRegistration === undefined) {
@@ -1582,11 +1591,11 @@ var agentAuthPlugin = (config) => {
   }).post(identityRoute, async ({ body }) => {
     const value = recordBody(body);
     if (value === undefined || typeof value.type !== "string") {
-      return json({ error: "invalid_request" }, 400);
+      return json({ error: "invalid_request" }, HTTP_BAD_REQUEST);
     }
     const input = parseRegistrationInput(value);
     if (input === undefined)
-      return json({ error: "invalid_request" }, 400);
+      return json({ error: "invalid_request" }, HTTP_BAD_REQUEST);
     const result = await startAgentRegistration(config, input);
     if ("error" in result) {
       return json({
@@ -1598,7 +1607,7 @@ var agentAuthPlugin = (config) => {
   }).post(claimRoute, async ({ body }) => {
     const value = recordBody(body);
     if (value === undefined || typeof value.claim_token !== "string" || typeof value.email !== "string") {
-      return json({ error: "invalid_request" }, 400);
+      return json({ error: "invalid_request" }, HTTP_BAD_REQUEST);
     }
     const result = await beginAgentClaim(config, {
       claimToken: value.claim_token,
@@ -1613,7 +1622,7 @@ var agentAuthPlugin = (config) => {
       value = Object.fromEntries(new URLSearchParams(body));
     }
     if (value === undefined || typeof value.claim_attempt_token !== "string" || typeof value.user_code !== "string") {
-      return json({ error: "invalid_request" }, 400);
+      return json({ error: "invalid_request" }, HTTP_BAD_REQUEST);
     }
     const result = await completeAgentClaim(config, {
       attemptToken: value.claim_attempt_token,
@@ -12819,6 +12828,7 @@ export {
   agentHasScopes,
   agentDelegationsTable,
   agentAuthPlugin,
+  agentAuthContextPlugin,
   agentAuthChallenge,
   DEFAULT_AGENT_RESOURCE_METADATA_ROUTE,
   AGENT_IDENTITY_ASSERTION_TYPE,
@@ -12826,5 +12836,5 @@ export {
   AGENT_CLAIM_GRANT_TYPE
 };
 
-//# debugId=4AABAB4CBDEE339264756E2164756E21
+//# debugId=35BBF77DF315307D64756E2164756E21
 //# sourceMappingURL=index.js.map